Using the

tls

package, it is not entirely clear to me how I am going to generate a CA and sign a certificate with it. I create the CA with

tls.NewSelfSignedCert

but I would assume I would need to use

tls.NewLocallySignedCert

for signing the certs to this CA? I have also tried with

tls.NewSelfSignedCert

but there is no obvious way to reference the CA from this function. Any help would be greatly appreciated.

example here in typescript: https://github.com/jaxxstorm/pulumi-examples/blob/main/typescript/misc/self_signed_cert/index.ts

Thank you! Hopefully this helps emulate my mental flow of this 👍